Re: BIND and 32774 or 32775 UDP ports

From: John Jasen (jjasen1@umbc.edu)
Date: 10/10/01 

Date: Wed, 10 Oct 2001 13:35:01 -0400
From: John Jasen <jjasen1@umbc.edu>
To: <focus-sun@securityfocus.com>
Subject: Re: BIND and 32774 or 32775 UDP ports
Message-ID: <Pine.SGI.4.31L.02.0110101330030.7781639-100000@irix2.gl.umbc.edu>

On Wed, 10 Oct 2001, Crist J. Clark wrote:

> > I am not sure why this ports are being put in listening state by BIND. Any
> > ideas ...?
>
> It just made a query or two to some DNS servers and is waiting for a
> response? Or does it keep these two open for long periods?

bind, at least from somewhere in the 8.x releases on up, will use a
non-privileged port for queries to other nameservers.

In order to stop this, or to set it to specific port # (rather than
random), add this to the named.conf and restart:

query-source address * port 53; 

--
-- John E. Jasen (jjasen1@umbc.edu)
-- In theory, theory and practise are the same. In practise, they aren't.

Relevant Pages